Skip to content
OpenAdvisories
Medium WID-SEC-2024-3662 6 CVEs

Adobe Acrobat und Acrobat Reader: Mehrere Schwachstellen

Published Dec 10, 2024 · Updated Dec 10, 2024 · de-DE

Vendor: Adobe Product: Acrobat Product: Acrobat DC Product: Acrobat Reader Product: Acrobat Reader DC Platform: macOS Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Adobe Acrobat und Acrobat Reader ausnutzen, um beliebigen Programmcode auszuführen, um einen Denial of Service zu verursachen oder informationen offenzulegen.

Product

Adobe Acrobat ist ein Programm für die Erstellung und Betrachtung von Dokumenten im Portable Document Format (PDF).
Acrobat Reader ist ein Programm für die Anzeige von Dokumenten im Portable Document Format (PDF).

Vulnerabilities 6

  • High 7.8
    CVE-2024-49530

    Acrobat Reader | Use After Free (CWE-416)

    Acrobat Reader versions 24.005.20307, 24.001.30213, 24.001.30193, 20.005.30730, 20.005.30710 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issu…

    Adobe Acrobat Reader
  • Medium 6.3
    CVE-2024-49535

    Acrobat Reader | Improper Restriction of XML External Entity Reference ('XXE') (CWE-611)

    Acrobat Reader versions 24.005.20307, 24.001.30213, 24.001.30193, 20.005.30730, 20.005.30710 and earlier are affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerability that allows an attacker to provide malicious XML input cont…

    Adobe Acrobat Reader
  • Medium 5.5
    CVE-2024-49531

    Acrobat Reader | NULL Pointer Dereference (CWE-476)

    Acrobat Reader versions 24.005.20307, 24.001.30213, 24.001.30193, 20.005.30730, 20.005.30710 and earlier are affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerabili…

    Adobe Acrobat Reader
  • Medium 5.5
    CVE-2024-49532

    Acrobat Reader | Out-of-bounds Read (CWE-125)

    Acrobat Reader versions 24.005.20307, 24.001.30213, 24.001.30193, 20.005.30730, 20.005.30710 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to by…

    Adobe Acrobat Reader
  • Medium 5.5
    CVE-2024-49533

    Acrobat Reader | Out-of-bounds Read (CWE-125)

    Acrobat Reader versions 24.005.20307, 24.001.30213, 24.001.30193, 20.005.30730, 20.005.30710 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to by…

    Adobe Acrobat Reader
  • Medium 5.5
    CVE-2024-49534

    Acrobat Reader | Out-of-bounds Read (CWE-125)

    Acrobat Reader versions 24.005.20307, 24.001.30213, 24.001.30193, 20.005.30730, 20.005.30710 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to by…

    Adobe Acrobat Reader

Revision history

  1. #1

    Initiale Fassung

References